Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/7HAtNEDmX-C_FCHIcW5jLtSxQMs.roa
File: 7HAtNEDmX-C_FCHIcW5jLtSxQMs.roa (raw, json)
Hash identifier: BPMm3euYOxuY1/9uneSrf5MsE0CBoi1Jvv1y6XNEuxE=
Subject key identifier: EC:70:2D:34:40:E6:5F:E0:BF:14:21:C8:71:6E:63:2E:D4:B1:40:CB
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 018CC56E8A7E8908B45E410B5558D5F40527
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/7HAtNEDmX-C_FCHIcW5jLtSxQMs.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30762
IP address blocks: 185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8a:7e:89:08:b4:5e:41:0b:55:58:d5:f4:05:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec702d3440e65fe0bf1421c8716e632ed4b140cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:9e:30:3b:6e:8f:37:9f:06:2c:2a:09:4f:
13:3c:5b:e6:c7:ed:bd:99:e4:74:31:28:a2:0a:d6:
15:db:a4:5a:ee:d6:e5:e9:3c:65:0f:1a:44:44:80:
12:e6:4e:c1:e4:0f:0f:38:e3:46:e0:e8:88:f7:0e:
4b:d6:7b:aa:8a:52:a1:3f:1e:ac:7a:f0:54:e0:f6:
73:8f:11:14:23:f0:83:13:a1:4d:4b:8c:60:75:67:
e7:8b:95:bc:7c:28:7d:e0:77:7c:6c:ac:0b:c1:35:
3a:23:ce:d7:99:7c:4c:0c:c1:c5:2b:e3:17:c5:2a:
59:f5:b9:11:a4:1a:db:50:a1:bf:dd:89:ff:fa:49:
83:f6:d6:33:dc:24:08:42:71:b0:ca:f1:fa:71:8f:
d4:5d:57:ad:72:fd:78:8a:5e:0b:8c:dd:f4:cc:93:
f7:8c:a8:4d:ea:a8:3f:5f:a0:8f:63:6a:aa:f6:61:
7a:ff:b3:1c:94:dd:78:f4:77:6e:a7:d8:62:11:ed:
2c:66:58:7f:b5:70:2c:d6:5e:df:63:85:2e:59:5a:
21:fe:19:31:bb:31:3f:fe:71:68:e1:20:f7:a3:ab:
92:a9:00:1a:2f:56:42:01:6f:36:fb:88:7b:d0:fe:
22:20:7f:52:6c:cb:e7:d6:4a:06:cb:fe:c8:ce:14:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:2D:34:40:E6:5F:E0:BF:14:21:C8:71:6E:63:2E:D4:B1:40:CB
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/7HAtNEDmX-C_FCHIcW5jLtSxQMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:e9:ca:e7:ea:b3:33:9d:99:d4:79:cb:e0:cc:83:4a:04:37:
0a:02:25:13:0b:6c:e7:01:8a:7c:f6:cc:fe:06:ae:5a:bf:4d:
03:5a:55:06:c4:4d:32:f9:62:aa:f0:47:32:d7:af:75:ef:4f:
b0:46:4c:57:34:da:54:4e:99:6f:2f:d9:da:65:6a:bd:c0:a4:
ff:75:6c:3b:fb:fb:bc:e8:18:8e:11:56:60:a8:9a:be:3b:4c:
a5:ba:20:d6:1f:b5:15:7e:ae:c4:4f:19:cf:00:ac:39:43:82:
3d:92:d2:41:4d:18:14:85:66:e3:42:6e:6d:83:fa:5b:d2:51:
f6:3e:7c:2f:c6:41:dd:b8:3f:f6:0d:9e:dc:6c:f8:65:69:dc:
aa:10:75:d7:91:9f:5a:70:30:98:6f:61:e7:ec:b5:64:fb:51:
76:b0:bc:97:39:4c:ce:48:e9:fa:ef:be:30:cc:07:2b:9e:d9:
51:19:e3:d7:de:31:31:fb:b3:6d:1a:6c:62:9a:4c:4b:60:9f:
04:40:f4:c8:22:7f:a6:02:5d:89:2f:c9:96:58:4f:87:2f:86:
19:a5:c2:e5:16:28:b8:a6:23:28:f8:19:12:ed:59:2c:52:fd:
9e:32:db:09:67:12:6f:38:5f:ce:d1:f1:fc:ee:b9:28:98:14:
76:fb:e4:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbop+iQi0XkELVVjV9AUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjQwMTAxMTQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzcwMmQzNDQwZTY1ZmUwYmYxNDIxYzg3MTZlNjMyZWQ0YjE0MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynCeMDtujzefBiwqCU8TPFvmx+29
meR0MSiiCtYV26Ra7tbl6TxlDxpERIAS5k7B5A8POONG4OiI9w5L1nuqilKhPx6s
evBU4PZzjxEUI/CDE6FNS4xgdWfni5W8fCh94Hd8bKwLwTU6I87XmXxMDMHFK+MX
xSpZ9bkRpBrbUKG/3Yn/+kmD9tYz3CQIQnGwyvH6cY/UXVetcv14il4LjN30zJP3
jKhN6qg/X6CPY2qq9mF6/7MclN149Hdup9hiEe0sZlh/tXAs1l7fY4UuWVoh/hkx
uzE//nFo4SD3o6uSqQAaL1ZCAW82+4h70P4iIH9SbMvn1koGy/7IzhSLtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOxwLTRA5l/gvxQhyHFuYy7UsUDLMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvN0hBdE5FRG1YLUNfRkNISWNXNWpMdFN4UU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuex8MA0G
CSqGSIb3DQEBCwUAA4IBAQCj6crn6rMznZnUecvgzINKBDcKAiUTC2znAYp89sz+
Bq5av00DWlUGxE0y+WKq8Ecy169170+wRkxXNNpUTplvL9naZWq9wKT/dWw7+/u8
6BiOEVZgqJq+O0yluiDWH7UVfq7ETxnPAKw5Q4I9ktJBTRgUhWbjQm5tg/pb0lH2
PnwvxkHduD/2DZ7cbPhladyqEHXXkZ9acDCYb2Hn7LVk+1F2sLyXOUzOSOn6774w
zAcrntlRGePX3jEx+7NtGmximkxLYJ8EQPTIIn+mAl2JL8mWWE+HL4YZpcLlFii4
piMo+BkS7VksUv2eMtsJZxJvOF/O0fH87rkomBR2++To
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org